Trojan.Starman.6411

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#5.50.203':445
'22#.#5.172.129':445
'22#.#5.58.60':445
'22#.#5.132.20':445
'22#.#5.60.120':445
'22#.#5.249.162':445
'22#.#5.97.163':445
'22#.#5.32.136':445
'22#.#5.219.108':445
'22#.#5.135.219':445
'22#.#5.94.104':445
'22#.#5.88.11':445
'22#.#5.119.17':445
'22#.#5.225.247':445
'22#.#5.38.95':445
'22#.#5.163.46':445
'22#.#5.100.7':445
'22#.#5.33.100':445
'22#.#5.7.104':445
'22#.#5.206.44':445
'22#.#5.98.254':445
'22#.#5.66.207':445
'22#.#5.40.171':139
'22#.#5.155.234':139
'22#.#5.95.236':139
'22#.#5.85.191':139
'22#.#5.53.85':139
'22#.#5.213.179':139
'22#.#5.10.170':139
'22#.#5.32.37':139
'22#.#5.135.218':139
'22#.#5.37.173':139
'22#.#5.191.54':139
'22#.#5.38.161':139
'22#.#5.156.201':139
'22#.#5.246.142':139
'22#.#5.2.128':445
'22#.#5.165.130':139
'22#.#5.156.201':445
'22#.#5.27.170':139
'22#.#5.38.161':445
'22#.#5.165.130':445
'22#.#5.246.142':445
'22#.#5.32.136':139
'22#.#5.249.162':139
'22#.#5.135.219':139
'22#.#5.172.129':139
'22#.#5.219.108':139
'22#.#5.68.36':445
'22#.#5.26.157':445
'22#.#5.2.128':139
'22#.#5.97.163':139
'22#.#5.66.207':139
'22#.#5.50.203':139
'22#.#5.7.104':139
'22#.#5.100.7':139
'22#.#5.98.254':139
'22#.#5.119.17':139
'22#.#5.206.44':139
'22#.#5.60.120':139
'22#.#5.58.60':139
'22#.#5.132.20':139
'22#.#5.33.100':139
'22#.#5.94.104':139
'22#.#5.175.82':445
'22#.#5.224.67':445
'22#.#5.144.0':445
'22#.#5.74.69':445
'22#.#5.86.142':445
'22#.#5.247.83':445
'22#.#5.156.98':445
'22#.#5.35.42':445
'22#.#5.167.37':445
'22#.#5.133.144':445
'22#.#5.37.134':445
'22#.#5.244.165':445
'22#.#5.62.251':445
'22#.#5.163.129':445
'22#.#5.29.59':445
'22#.#5.53.54':445
'22#.#5.143.180':445
'22#.#5.211.232':445
'22#.#5.222.211':445
'22#.#5.71.205':445
'22#.#5.231.162':445
'22#.45.6.16':445
'22#.#5.135.202':445
'22#.#5.196.135':445
'22#.#5.202.169':445
'22#.#5.121.18':445
'22#.#5.169.248':445
'22#.#5.211.39':445
'22#.#5.218.199':445
'22#.#5.49.30':445
'22#.#5.31.50':445
'22#.#5.131.110':445
'22#.#5.180.190':445
'22#.#5.10.170':445
'22#.#5.129.27':445
'22#.#5.213.179':445
'22#.#5.37.173':445
'22#.#5.32.37':445
'22#.#5.73.63':445
'22#.#5.249.121':445
'22#.#5.95.237':445
'22#.#5.11.42':445
'22#.#5.166.169':445
'22#.#5.2.193':445
'22#.#5.94.228':445
'22#.#5.91.118':445
'22#.#5.16.191':445
'22#.#5.160.196':445
'22#.#5.133.228':445
'22#.#5.176.122':139
'22#.#5.173.63':139
'22#.#5.243.137':139
'22#.#5.124.168':445
'22#.#5.172.124':139
'22#.#5.196.197':445
'22#.#5.96.34':445
'22#.#5.13.239':445
'22#.#5.98.157':445
'22#.#5.158.2':445
'22#.#5.157.157':445
'22#.#5.156.12':445
'22#.#5.197.156':445
'22#.#5.92.241':445
'22#.#5.186.143':445
'22#.45.0.53':445
'22#.#5.49.30':139
'22#.#5.211.39':139
'22#.#5.131.110':139
'22#.#5.196.135':139
'22#.#5.31.50':139
'22#.#5.157.157':139
'22#.#5.98.157':139
'22#.#5.158.2':139
'22#.#5.218.199':139
'22#.#5.2.193':139
'22#.#5.135.202':139
'22#.#5.95.237':139
'22#.#5.73.63':139
'22#.#5.166.169':139
'22#.#5.129.27':139
'22#.#5.11.42':139
'22#.#5.169.248':139
'22#.#5.202.169':139
'22#.#5.121.18':139
'22#.#5.249.121':139
'22#.#5.180.190':139
'22#.#5.96.34':139
'22#.#5.191.54':445
'22#.#5.85.191':445
'22#.#5.27.170':445
'22#.#5.91.118':139
'22#.#5.124.168':139
'22#.#5.155.234':445
'22#.#5.135.218':445
'22#.#5.40.171':445
'22#.#5.53.85':445
'22#.#5.95.236':445
'22#.#5.94.228':139
'22#.#5.92.241':139
'22#.#5.156.12':139
'22#.45.0.53':139
'22#.#5.13.239':139
'22#.#5.186.143':139
'22#.#5.133.228':139
'22#.#5.16.191':139
'22#.#5.160.196':139
'22#.#5.197.156':139
'22#.#5.196.197':139
'22#.#5.186.252':445
'22#.#5.70.240':445
'22#.#5.4.195':445
'22#.#5.138.253':445
'22#.#5.167.201':445
'22#.#5.154.176':445
'22#.#5.50.36':445
'22#.#5.160.48':445
'22#.#5.38.17':445
'22#.#5.69.42':445
'22#.#5.32.53':445
'22#.#5.15.153':139
'22#.#5.146.253':139
'22#.#5.49.105':139
'22#.#5.27.37':139
'22#.#5.195.76':139
'22#.#5.124.30':445
'22#.#5.132.97':445
'22#.#5.106.135':139
'22#.#5.101.6':139
'22#.#5.162.165':139
'22#.#5.121.219':445
'22#.#5.196.153':445
'22#.#5.139.98':445
'22#.#5.64.98':445
'22#.#5.7.106':445
'22#.45.98.7':445
'22#.#5.148.10':445
'22#.#5.37.205':445
'22#.#5.179.66':445
'22#.#5.173.138':445
'22#.#5.58.148':445
'22#.#5.106.26':445
'22#.#5.14.138':445
'22#.#5.104.14':445
'22#.#5.138.63':445
'22#.#5.98.228':445
'22#.#5.158.98':445
'22#.#5.27.239':445
'22#.#5.198.63':445
'22#.#5.241.210':445
'22#.#5.28.104':445
'22#.#5.44.222':445
'22#.#5.98.228':139
'22#.#5.158.98':139
'22#.#5.121.219':139
'22#.#5.154.176':139
'22#.#5.50.36':139
'22#.#5.28.104':139
'22#.#5.44.222':139
'22#.#5.104.14':139
'22#.#5.138.63':139
'22#.#5.14.138':139
'22#.#5.160.48':139
'22#.#5.4.195':139
'22#.#5.167.201':139
'22#.#5.138.253':139
'22#.#5.132.97':139
'22#.#5.124.30':139
'22#.#5.38.17':139
'22#.#5.69.42':139
'22#.#5.70.240':139
'22#.#5.32.53':139
'22#.#5.186.252':139
'22#.#5.241.210':139
'22#.#5.119.98':139
'22#.#5.220.32':139
'22#.#5.141.209':139
'22#.#5.148.10':139
'22#.#5.37.205':139
'22#.#5.87.253':139
'22#.#5.23.134':139
'22#.#5.20.125':139
'22#.#5.137.220':139
'22#.#5.226.137':139
'22#.#5.179.66':139
'22#.#5.7.106':139
'22#.45.98.7':139
'22#.#5.106.26':139
'22#.#5.27.239':139
'22#.#5.198.63':139
'22#.#5.173.138':139
'22#.#5.58.148':139
'22#.#5.139.98':139
'22#.#5.64.98':139
'22#.#5.196.153':139
'22#.#5.58.127':445
'22#.#5.68.36':139
'22#.#5.48.183':445
'22#.#5.79.136':445
'22#.#5.132.88':445
'22#.#5.143.180':139
'22#.#5.29.59':139
'22#.#5.53.54':139
'22#.#5.26.157':139
'22#.#5.175.82':139
'22#.#5.58.127':139
'22#.#5.70.241':445
'22#.#5.113.252':445
'22#.#5.219.93':445
'22#.45.2.92':445
'22#.#5.81.124':445
'22#.#5.132.88':139
'22#.#5.48.183':139
'22#.#5.79.136':139
'22#.#5.195.36':445
'22#.#5.175.194':445
'22#.#5.62.251':139
'22#.#5.167.37':139
'22#.#5.156.98':139
'22#.#5.37.134':139
'22#.#5.144.0':139
'22#.#5.133.144':139
'22#.#5.225.247':139
'22#.#5.88.11':139
'22#.#5.163.46':139
'22#.#5.35.42':139
'22#.#5.38.95':139
'22#.#5.224.67':139
'22#.#5.71.205':139
'22#.#5.211.232':139
'22#.45.6.16':139
'22#.#5.163.129':139
'22#.#5.231.162':139
'22#.#5.247.83':139
'22#.#5.74.69':139
'22#.#5.86.142':139
'22#.#5.222.211':139
'22#.#5.244.165':139
'22#.#5.162.165':445
'22#.#5.106.135':445
'22#.#5.101.6':445
'22#.#5.15.153':445
'22#.#5.146.253':445
'22#.#5.44.222':9988
'22#.#5.154.176':9988
'22#.#5.69.42':9988
'22#.#5.4.195':9988
'22#.#5.32.53':9988
'22#.#5.49.105':445
'22#.#5.137.220':445
'22#.#5.226.137':445
'22#.#5.220.32':445
'22#.#5.141.209':445
'22#.#5.119.98':445
'22#.#5.27.37':445
'22#.#5.195.76':445
'22#.#5.23.134':445
'22#.#5.20.125':445
'22#.#5.87.253':445
'22#.#5.138.63':9988
'22#.45.2.92':139
'22#.#5.81.124':139
'22#.#5.196.153':9988
'22#.#5.124.30':9988
'22#.#5.186.252':9988
'22#.#5.195.36':139
'22#.#5.175.194':139
'22#.#5.113.252':139
'22#.#5.219.93':139
'22#.#5.70.241':139
'22#.#5.27.239':9988
'22#.#5.14.138':9988
'22#.#5.38.17':9988
'22#.#5.64.98':9988
'22#.#5.241.210':9988
'22#.#5.198.63':9988
'22#.#5.58.148':9988
'22#.#5.132.97':9988
'22#.#5.7.106':9988
'22#.#5.104.14':9988
'22#.#5.50.36':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней